rundll32.exe - virus?

[David H. Lipman]

Dalt:

It uses the NPU and a dedicated 16MB block of RAM. It does a little I/O when it
reads/writes data back to the hard disk. Other than that -- No real resource utilization.
I have been a SETI member for ~4.5 years now.

The ONLY time I have seen the commandline client cause problems is when MS Outlook 200 was
synchronizing offline mail folders. The process took way too long or failed when SETI was
running in the background.

While it *may* cause high CPU utilization I doubt it is the root of the OPs problem.

Dave

| Oooooo Seti...that explains a lot....Seti can run in the background when
| memory is available....have a look at your seti settings....
| Seti in itself uses masses of system resources...
| I'd suggest that you look there for starters..maybe uninstall it then see
| what happens??
|
| cheers Dalt
| | > I have no idea. It just starts sometimes. Sometimes I'll be in a program
| > working away (it's happened with IE or Netscape, Outlook, Word, some
| games,
| > scanner software, and others) for a while and all of a sudden I'll notice
| it
| > slow way down. I'll check, and it'll be the rundll32 thing. Sometimes
| > it'll happen right when I start up a program. It happened two days ago
| > right when I started up a McAfee scan (ironic), so after it was done I ran
| a
| > McAfee scan again and the rundll32 didn't start up. Just this evening, I
| > left my PC for a while, checked before I left if it was running and it
| > wasn't ,and when I got back an hour later it was. If you think it was my
| > screen saver, I don't think so - it comes on all the time and the rundll32
| > does not most of the time; also, the rundll32 comes on a lot without the
| > screen saver. And just in case you're wondering, I generally use
| Seti@Home
| > as my screensaver.
| >
| > I'm perplexed.
| >
| > I appreciate your wondering about it.
| >
| >
| > | > > I've seen the command only executed from the Registry HKLM Run location.
| > >
| > > When and from where does the command "kick off" ?
| > >
| > > Dave
| > >
| > | > > | I've got 512Mb of memory. It's only when rundll32.exe kicks off that
| I
| > see
| > > | a slowdown. Otherwise it works great, even if I have 6-8 program
| > running at
| > > | the same time. Right now, with outlook, outlook express, AIM,
| Netscape
| > > | running, I am running great.
| > > |
| > > |
| > > | | > > | > How much RAM is in the platform ?
| > > | >
| > > | > For WinXP, you should have a minimum of 256MB.
| > > | >
| > > | > Dave
| > > | >
| > > | | > > | > | Thanks everyone for the replies. I guess I now know it's not a
| > virus,
| > > | but I
| > > | > | still don't know what to do about it.
| > > | > |
| > > | > | In response to this note in particular, I wanted to mention
| (should
| > have
| > > | > | mentioned in my first post) that I have McAfee running and fully
| > > | updated,
| > > | > | and I did a complete scan of all my files and it found nothing. I
| > also
| > > | have
| > > | > | the McAfee firewall running.
| > > | > |
| > > | > |
| > > | > | So ... if it's not a virus, how do I keep from having it suck up
| all
| > my
| > > | cpu
| > > | > | time? It literally keeps the cpu at 100% (system idle at 0%) the
| > whole
| > > | > | time. I'll run chkdsk (I've done so before, within the last few
| > months,
| > > | but
| > > | > | I'll do it again). I'll also try turning off active desktop, but
| > I've
| > > | had
| > > | > | it on since I installed XP and this problem just cropped up in the
| > last
| > > | > | couple of months. I can't really imagine these stopping the
| various
| > > | > | instances of the rundll32.exe that I occasionally see (but then I
| am
| > not
| > > | a
| > > | > | deep techie), but it can't hurt.
| > > | > |
| > > | > | Any other suggestions?
| > > | > |
| > > | > |
| > > | > | Joe
| > > | > |
| > > | > | | > > | > | > On Sat, 13 Sep 2003 02:46:55 GMT, "JOe" <[email protected]>
| > wrote:
| > > | > | >
| > > | > | >
| > > | > | > >Can anyone tell me, what is it, and what do I do about it?
| > > | > | >
| > > | > | >
| > > | > | > It's a Windows runtime dll. If you're concerned about viruses,
| use
| > a
| > > | > | > scanner.
| > > | > | >
| > > | > |
| > > | > |
| > > | >
| > > | >
| > > |
| > > |
| > >
| > >
| >
| >
|
|

 

[Ed >:-)]

XP Chkdsk is a joke. (But that's besides the point.

I found Mcafee to be lacking of late. I keep a zip file with the
newest virus on a floppie. i sticvk it in each time i run a scan.
Mcafee didn't pick up on a few of the newer ones that were already out
for god knows how long. Norton did however.

 

[Ed >:-)]

Is there a way to track which program/application/process starts
another such as rundll32 or svchost?

This would help a lot in deciding whether or not to grant Internet
access.

Thanks,

Fanchon

Use your firewall. (Not i do not count windows built in crap as a
firewall.) Get the zone alarm. See where it's trying to send data and
if it's to redmond (like i would assume) it's some M$ crap warez
striking again.

 

[mitundergrad]

XP Chkdsk is a joke. (But that's besides the point.

If running Windows XP under NTFS one should run CHKNTFS then the
applicable switch. CHKNTFS /? from the cmd box will do the trick.

 

[Dalt]

Cheera David I used to run the GUI client for windows as a benchmark but
when they had to make so many changes due to cheaters I gave up

best wishes Dalt

 

[Ed >:-)]

If running Windows XP under NTFS one should run CHKNTFS then the
applicable switch. CHKNTFS /? from the cmd box will do the trick.

Thanks i'll make a note of that. But i was talking about this crap
where it needs complete access to some files in order to run repair.
Do you want to schedual scandisk to run at next startup.